WIP: CSI Node daemonset

Signed-off-by: Juan Miguel Olmo Martínez <[email protected]>

config/rbac/kustomization.yaml

@@ -7,6 +7,7 @@ resources:
 - service_account.yaml
 - role.yaml
 - role_binding.yaml
+- sccs.yaml
 - leader_election_role.yaml
 - leader_election_role_binding.yaml
 # Comment the following 4 lines if you want to disable

config/rbac/role_binding.yaml

@@ -10,3 +10,16 @@ subjects:
 - kind: ServiceAccount
   name: controller-manager
   namespace: system
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: topolvm-node-rolebinding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: topolvm-node
+subjects:
+  - kind: ServiceAccount
+    name: topolvm-node
+    namespace: system

config/rbac/sccs.yaml

@@ -0,0 +1,25 @@
+ ---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: use-scc-privileged
+rules:
+- apiGroups:
+  - security.openshift.io
+  resources:
+  - securitycontextconstraints
+  resourceNames:
+  - privileged
+  verbs:
+  - use
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: topolvm-node-scc
+ subjects:
+   - kind: ServiceAccount
+     name: topolvm-node
+ roleRef:
+   kind: Role
+   name: use-scc-privileged

config/rbac/service_account.yaml

@@ -3,3 +3,9 @@ kind: ServiceAccount
 metadata:
   name: controller-manager
   namespace: system
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: topolvm-node
+  namespace: system

controllers/defaults.go

@@ -40,6 +40,22 @@ var (
 	CsiResizerImage       = GetEnvOrDefault("CSI_RESIZER_IMAGE")
 
 	TopolvmCSIDriverName = "topolvm.cybozu.com"
+
+	// topoLVM Node
+	TopolvmNodeServiceAccount       = "topolvm-node"
+	TopolvmNodeDaemonsetName        = "topolvm-node"
+	CSIKubeletRootDir               = "/var/lib/kubelet/"
+	lvmdConfigCM                    = "lvmd_config"
+	NodeContainerName               = "topolvm-node"
+	TopolvmNodeContainerHealthzName = "healthz"
+	auxImage                        = "registry.access.redhat.com/ubi8/ubi-minimal"
+	lvmdConfigFile                  = "/etc/topolvm/lvmd.yaml"
+
+	// topoLVM Node resource requests/limits
+	TopolvmNodeMemRequest = "250Mi"
+	TopolvmNodeMemLimit   = "250Mi"
+	TopolvmNodeCPURequest = "250m"
+	TopolvmNodeCPULimit   = "250m"
 )
 
 func GetEnvOrDefault(env string) string {

controllers/lvmcluster_controller.go

@@ -98,6 +98,7 @@ func (r *LVMClusterReconciler) Reconcile(ctx context.Context, req ctrl.Request)
 func (r *LVMClusterReconciler) reconcile(ctx context.Context, instance *lvmv1alpha1.LVMCluster) (ctrl.Result, error) {
 	resourceList := []resourceManager{
 		&csiDriver{},
+		&topolvmNode{},
 	}
 
 	//The resource was deleted